CVE-2026-58441

A Server-Side Request Forgery (SSRF) vulnerability exists in Gitea within the restore-repo functionality. The root cause is the processing of an unsanitized pull_request.yml Head.CloneURL parameter. This vulnerability was addressed in Gitea version 1.27.0 . Specific exploit details are not provid...